Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/qLd0MkFMvORcSIXOX5ewr1QmO6o.roa
File: qLd0MkFMvORcSIXOX5ewr1QmO6o.roa (raw, json)
Hash identifier: C4ucND7he2TndothdqxRjz5FbAiclLpD/L/K3eGpvGw=
Subject key identifier: A8:B7:74:32:41:4C:BC:E4:5C:48:85:CE:5F:97:B0:AF:54:26:3B:AA
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 0195A88084D86221474C8E00667E6BCDF3C3
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/qLd0MkFMvORcSIXOX5ewr1QmO6o.roa
Signing time: Tue 18 Mar 2025 09:05:49 +0000
ROA not before: Tue 18 Mar 2025 09:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 37.75.8.0/21 maxlen: 24
185.28.0.0/22 maxlen: 24
185.153.248.0/22 maxlen: 22
185.153.248.0/24 maxlen: 24
185.153.249.0/24 maxlen: 24
185.153.250.0/24 maxlen: 24
185.153.251.0/24 maxlen: 24
185.155.148.0/24 maxlen: 24
185.155.149.0/24 maxlen: 24
195.142.0.0/22 maxlen: 24
195.142.104.0/21 maxlen: 24
195.142.132.0/22 maxlen: 24
2a07:89c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Mar 2025 09:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:80:84:d8:62:21:47:4c:8e:00:66:7e:6b:cd:f3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Mar 18 09:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b77432414cbce45c4885ce5f97b0af54263baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:1e:09:52:1d:36:18:7f:90:1d:2e:34:67:
a8:45:f6:0c:67:72:6e:bd:7c:1f:36:d3:9a:bb:7c:
d1:b9:56:92:84:13:24:a6:0e:f2:60:d2:88:aa:18:
2d:f8:dc:43:ac:81:5e:da:47:36:1f:96:ac:04:71:
f3:28:80:84:0d:ae:9b:e6:56:64:e1:4d:4d:77:0c:
57:f8:5d:e2:a9:e7:87:5b:c0:4d:b9:ed:bc:e5:9b:
2e:a2:33:7d:41:05:48:c2:d0:81:68:80:7f:94:91:
4e:2c:d7:67:07:2f:38:ac:f7:f0:74:e3:e2:95:c5:
38:9b:03:49:59:c6:2c:3f:06:60:25:db:73:24:df:
7d:36:8f:aa:fa:e9:ef:76:3f:b2:70:13:32:32:07:
44:41:84:80:89:f2:b1:84:0d:da:94:0f:19:e6:fe:
b6:3a:78:3f:61:c7:0e:ca:c6:20:5b:02:49:36:b1:
24:8e:d2:94:95:a3:be:64:c2:0c:1a:d5:54:94:bd:
f1:cd:a8:3c:c1:82:3d:6c:09:8b:b5:8c:45:e1:75:
0c:e5:a4:06:5c:19:ca:91:91:45:d1:71:c5:46:d7:
a8:af:7d:ae:61:9f:24:4f:90:63:d8:98:ba:ba:a2:
89:08:fe:bc:cd:2c:20:8a:64:02:f4:18:f3:2f:b3:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B7:74:32:41:4C:BC:E4:5C:48:85:CE:5F:97:B0:AF:54:26:3B:AA
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/qLd0MkFMvORcSIXOX5ewr1QmO6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
185.153.248.0/22
185.155.148.0/23
195.142.0.0/22
195.142.104.0/21
195.142.132.0/22
IPv6:
2a07:89c0::/48
Signature Algorithm: sha256WithRSAEncryption
83:5e:8a:72:47:ff:4d:bc:29:44:e5:fc:ba:68:50:5a:b1:de:
49:bc:05:f3:c3:67:a1:5c:f4:6f:da:00:7f:b3:ff:f0:5a:2b:
ac:28:e4:79:e1:2a:0e:4b:0d:33:85:f7:1d:d3:37:6e:8f:bc:
a9:a8:7f:3d:33:a1:71:4c:56:74:8b:90:d9:2c:1a:3c:3a:f3:
9e:0e:1c:40:ff:98:4e:f4:c6:6c:df:30:4c:41:c6:62:c3:2a:
aa:52:91:b0:6c:93:80:0e:9b:ee:ac:d2:8b:a7:d2:ae:8d:32:
ae:96:87:39:68:89:e2:9e:b1:f1:c4:e8:56:c0:a9:99:f2:d2:
0b:27:d5:0c:ca:25:6e:f0:43:20:8a:e4:b2:e4:98:8b:74:3d:
ae:cd:92:4b:06:6b:43:e8:50:0a:d7:69:a0:ea:19:e5:d9:04:
e5:23:c3:2a:0c:5b:b1:fe:a7:df:f1:80:01:29:a9:d2:63:c2:
a0:6a:15:a7:54:43:59:56:07:3f:8c:b6:b8:86:b7:a6:fa:53:
9d:31:9a:fc:9a:bd:a4:45:1c:2a:fc:db:ff:65:54:3e:09:c2:
22:62:a6:fa:9b:70:0f:b5:55:de:55:1b:41:f7:92:fb:4a:c4:
87:ae:0e:99:9b:7f:48:b0:d2:bf:02:20:42:3e:8e:56:31:46:
33:ab:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:46:46 2025 by rpki-client